Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/skoKRiYRQBsmJjIXco37wFWVHrA.roa
File: skoKRiYRQBsmJjIXco37wFWVHrA.roa (raw, json)
Hash identifier: lUGVzfxZf8ghUlih+oLWZjh1fgwJSpcEymgk21t674w=
Subject key identifier: B2:4A:0A:46:26:11:40:1B:26:26:32:17:72:8D:FB:C0:55:95:1E:B0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE632580689660391C58B51C32FBC7FB4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/skoKRiYRQBsmJjIXco37wFWVHrA.roa
Signing time: Sun 07 Jan 2024 23:11:48 +0000
ROA not before: Sun 07 Jan 2024 23:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:32:58:06:89:66:03:91:c5:8b:51:c3:2f:bc:7f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 23:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24a0a462611401b26263217728dfbc055951eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:b9:00:a5:3c:1f:ab:bd:c5:a4:9e:e1:f1:
e9:1e:67:30:b2:88:69:48:e1:3c:5a:0c:53:15:90:
ce:89:4b:68:1e:e1:84:b6:11:f2:c5:2f:6d:2c:32:
9a:ea:32:3c:47:30:58:31:68:dd:82:09:15:12:45:
74:d5:42:4b:0d:f3:16:cc:27:88:36:24:c5:56:33:
11:21:15:1f:95:1d:df:62:23:08:b4:26:cc:d5:59:
44:b9:a8:40:e8:bf:96:83:ad:b3:ac:b2:6b:86:13:
ff:a4:80:49:4b:ba:0d:21:c7:b9:12:a3:56:d8:91:
b0:b9:98:ff:26:56:72:d3:8a:cc:40:a0:6d:eb:81:
9c:08:18:b0:57:05:84:27:13:27:24:a2:22:88:37:
12:18:b3:c1:4b:c4:a6:20:02:ab:74:2b:09:2d:09:
a0:bd:b4:5a:9b:01:2a:70:31:15:e2:f6:9d:ff:63:
db:c0:a9:ee:ee:b8:df:d1:a5:86:a4:c1:a2:23:5a:
84:a4:bd:b0:fb:b5:d3:3e:5e:60:5b:79:06:fa:46:
d6:a9:6c:f8:d1:35:c5:8c:63:ee:80:f5:cc:83:ee:
11:74:6e:3b:a5:ff:ba:8b:14:65:ff:00:3a:6c:7c:
72:b4:7b:43:6a:2d:0e:c3:c6:21:63:fa:49:fa:4a:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4A:0A:46:26:11:40:1B:26:26:32:17:72:8D:FB:C0:55:95:1E:B0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/skoKRiYRQBsmJjIXco37wFWVHrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:89:51:e5:9c:7c:92:4d:f5:b4:24:f5:29:cc:97:7c:ac:3f:
96:14:df:ca:f6:13:e6:c5:88:1c:f5:5a:55:f0:ef:3f:c7:80:
ab:39:ee:17:f6:70:dc:a3:92:73:17:30:22:7f:28:25:98:1d:
94:8a:6d:a3:59:b2:13:0b:c1:7c:4d:74:ba:cc:0a:96:77:c2:
24:31:b6:da:fc:55:5e:5a:78:9d:21:a2:4f:93:d8:bc:4f:81:
e9:4c:62:5e:8d:43:91:82:1d:41:d7:3a:12:72:d3:32:6c:cc:
9a:39:f1:87:aa:7f:8c:ed:7b:70:3d:1b:02:42:f5:57:7a:de:
0d:69:5a:82:87:9a:28:81:99:08:7e:de:53:e0:49:8f:2d:71:
85:3d:8c:64:df:a9:f0:43:60:14:a9:3a:26:6d:35:91:97:42:
36:a2:2a:30:66:b3:3c:9b:f3:22:f0:f7:e8:80:c3:e2:ea:c5:
cd:8f:ce:77:b9:cc:3a:51:62:30:51:9e:d1:ee:cc:c4:df:ec:
90:3e:43:82:22:37:14:74:54:0e:3c:41:50:11:0c:63:16:05:
aa:03:dc:bf:42:68:4e:df:47:d1:e1:62:74:66:aa:07:04:63:
7b:48:6d:83:46:9e:2a:fb:6d:a7:af:96:e8:8d:f4:0b:5b:e3:
ce:eb:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:05 2025 by rpki-client